🚀 Web SmartConsole Take 155 - Coming This Week!

[Tal_Ben_Bassat]

🚀 Web SmartConsole Take 155 – Coming This Week!

Hi Check Mates 👋

We’re excited to announce that the Web SmartConsole Take 155 release is on its way and will be rolled out later this week!
This version is a big one - packed with new capabilities, UX improvements, and multiple process and stability enhancements.

Below is a summary of what’s included 👇
If you have any questions or would like more details, feel free to reply here - we’d love to hear your thoughts!

 

What’s New in Take 155

Feature / Product	Description	Availability
Gateway & Cluster Editor	NAT Page: Added “Address translation” and “Communication with servers” sections. VPN Domain Page: Added “Exclude gateway’s external IP addresses” option and “Override default VPN” table.	Address translation: All supported versionsCommunication with servers: R82+Exclude external IPs: R81.20+Override VPN: R82+
IPS Page	Added IPS configuration page to Gateway/Cluster Editors.	R82
Custom Application/Site	Added full support for the Custom Application/Site Editor.	All supported versions
Network Editors	Added “Install on gateway” field to NAT tab in Host, Address Range, and Network editors.	R82+
Wildcard Editor Support	Now available.	All supported versions
CloudGuard Network Security	Code optimizations and UI improvements for CME (Cloud Management Extension).	All supported versions
Infinity AI Copilot	Supports multiple Management Servers connected to the same Infinity Portal tenant (sk182844).	R81.20 Jumbo HF Take 79
Infinity Services	Infinity Playblocks card now shows the tenant’s license status.	All supported versions
Policy Insights	Added a Settings button in the Policy Insights card for direct access to configuration options.	R81.20
General Enhancements	Object deletion from object bar, remember last login type, fix for Install Policy issue when previous policy doesn’t exist.	All supported versions

Coming Soon – Pending Jumbo & Work in Progress Features

A few highly anticipated capabilities - such as enhanced “Where Used” editing, VPN community improvements, and several modernized editors - are already in progress and will become available in upcoming Jumbo releases and future takes. Stay tuned for updates as they roll out!

Here’s a quick sneak peek of what’s coming next:

• Where Used: Replace and Remove Object functionality - planned for the next R82 Jumbo Hotfix (expected December).
• VPN Communities (Star/Mesh): Ongoing development to enhance VPN topology management.
• Administrator Page: New UI and configuration improvements.
• Gateway Page - VPN IPsec: Fresh IPsec configuration experience.
• Sync with UserCenter Page: Better synchronization for licensing and UC data.
• Track Column & “More” Dialog: Enhanced visibility and policy tracking.
• All Data Types Editors: Modernized editors with improved design and usability.
• Policy Auditor: First rollout planned in an upcoming release.
• Network Feed - Cluster Member Test Feed: Improved verification for cluster members.
• SASE Onboarding (Unified Policy): Streamlined onboarding and unified policy integration.
• Threat Prevention Insights: Deeper data visibility and advanced analysis.

 

More Information

Full release notes and installation details will be available later this week in SK170314.

 

🎉 Take 155 is packed with new functionality, performance improvements, and an even smoother Web SmartConsole experience!

We’re looking forward to hearing your impressions once it’s live.

 

💬 Share your thoughts and feedback below, or email us directly at WSC-Feedbacks@checkpoint.com  - we’d love to hear from you!

See you in the comments 👇

[the_rock]

Great improvements! 👍

[Tony_Graham]

It would be nice if the version number/Take/HF of the current web console was displayed in a similar way as the desktop client.

[the_rock]

I second that @Tony_Graham 

[Tal_Ben_Bassat]

Absolutely 🙂 -  we’re already working on that!
The Web SmartConsole will soon show the version, similar to the desktop client! 

[the_rock]

Great news 👍

[Paul_Grigg]

The wildcard editor shows a help button. Have you implemented online help for websmartconsole?

[martyn]

Some useful features but to be more useful could the current inability to work behind NAT (known issue/limitation) as well as the inability to run it behind a reverse proxy please be resolved.

Cheers,

Martyn

[Tal_Ben_Bassat]

Web SmartConsole Take 155 officially released! 🎉

[Daniel_Kuhl1]

Really cool and looking forward for what's coming next! 🎉

[Don_Paterson]

I have not seen AutoUpdater update the Web SmartConsole before, even when running the latest version of AutoUpdater.

Has anyone else seen or reported that?

I have seen it on R81.20 and R82 (various JHFAs).

I installed Take 157 manually and that works well. I can see MANAGE & SETTINGS now and also the NAT policy is not longer read-only. 

What is the schedule check interval?  Meaning, how often does AutoUpdater check for Web SmartConsole updates and carry out updates to Web SmartConsole?

https://support.checkpoint.com/results/sk/sk170314

"Web SmartConsole functionality is released gradually, with new functionality and it is updated automatically."

https://support.checkpoint.com/results/sk/sk165653 

[the_rock]

I had seen one in S1C, but then when I try to update it, window with yes or no option comes up, but yes is never available to click on. I even brought this up to TAC, they said would investigate, never heard anything back. tried 6 different browsers and multiple tenants, exact same issue.

[Don_Paterson]

Hi Andy,

This is about the Web SmartConsole for an on-prem SMS, and the AutoUpdater SK stating that AutoUpdater automatically updates Web SmartConsole.

Meaning, that when a customer browses to https://<my-sms-ip-address/smartconsole and then logs in (with SmartConsole credentials) they could expect to see the latest Web SmartConsole Take/version, and have the benefits of the updated version without the burden of installing the new Web SmartConsole Take.

There is no Yes/No prompt in this case since AutoUpdater is a cli tool that functions in the background in Gaia (and works as long as there is internet access and not issues).

Regards,

Don

[the_rock]

I know, absolutely right. I just mentioned S1C since that problem is there, but I was told should work 100%, but it does not.

[Don_Paterson]

But Web SmartConsole in this context is not valid for Smart-1 Cloud because it is for non-S1C Security Management Servers. 

I thought Streamed SmartConsole and Web SmartConsole were separate development trains.

[the_rock]

I thought they were the same, but I could be wrong...would not be first OR last time lol

[Don_Paterson]

Huh, I am at a loss because my lack of experience with S1C.

The S1C Admin Guide show all the options, including Web SmartConsole! (see below)

Live, and learn, and get confused and make mistakes.  😁

For me the key difference is that AutoUpdater is a Gaia utility, which I am led to believe automates the local Web SmartConsole updates.

The Web Smart-1 Console makes no mention of it being a tool available for S1C.

https://support.checkpoint.com/results/sk/sk170314 

https://sc1.checkpoint.com/documents/Infinity_Portal/WebAdminGuides/EN/Check-Point-SmartCloud-Admin-... 

Log in to SmartConsole from Smart-1 Cloud

Administrators can manage Smart-1 Cloud with one of these options:

• Web SmartConsole (browser-based)

• Streamed SmartConsole

• Desktop SmartConsole (Windows installation)

• Portable SmartConsole (no administrator rights required for Windows installation)

To access SmartConsole from a web browser

On the Smart-1 Cloud page, select Settings > API & SmartConsole > Open Web SmartConsole.

[the_rock]

Thats what I thought initially, but hey, wording can be little confusing, though says web smart console...: - )

[Tomer_Noy · Accepted solution]

Regarding Smart-1 Cloud:

The Web SmartConsole is available in Smart-1 Cloud by just opening the Smart-1 Cloud application in the Infinity Portal. To make it easier to use and seamless, we embedded the entire Web SmartConsole as pages inside the Smart-1 Cloud Infinity Application. There is no need (or way) to directly access the Web SmartConsole outside of the Infinity Portal.

The Streamed SmartConsole is exactly the same as the Desktop SmartConsole, only that we run it on our cloud infrastructure to allow customers to access the full SmartConsole capabilities in their browser (for Linux, mac or just to avoid installing the application). 

For the best experience, I recommend to use the Web SmartConsole within the Infinity Portal. That said, it does not yet have functional parity with the full SmartConsole, so the next best choice (if you need it) is to use the Desktop or Portable SmartConsole.
The Streamed SmartConsole is a good alternative if the other options don't work for you, but the performance and overall experience is not optimal as it's a streaming solution (not native).

Regarding the on-prem environments (not Smart-1 Cloud):

- The Web SmartConsole should automatically update in the background via the AutoUpdater utility (assuming that you have an internet connection and didn't opt-out).
- I believe it checks for updates once a day or every few hours, but you may not get the update as soon as we announce it since we usually do a gradual rollout and monitor the telemetry in the field to avoid catastrophes. So full rollout can take a few days or even a couple of weeks (depending on the size of the update).
- Even after the Web SmartConsole update, you may not see some of the newest features as they may depend on additional APIs that are added in JHF. We list that dependency in the documentation. Once you install the relevant JHF, you'll see all the new capabilities.

[Don_Paterson]

Thanks Tomer. Much appreciated.

I will test/monitor the AutoUpdater and local Web SmartConsole and report back on any issues if I see any.

All the best,

Don

[the_rock]

Great explanation @Tomer_Noy 

Thank you!